Merge pull request #712 from moisesguimaraes/fixes-ocsp-lookup

fixes CA matching when using NO_SKID
pull/723/head
Chris Conlon 2017-01-20 16:15:12 -07:00 committed by GitHub
commit 4d83ef1c23
1 changed files with 7 additions and 1 deletions

View File

@ -9677,7 +9677,13 @@ static int DecodeBasicOcspResponse(byte* source, word32* ioIndex,
}
}
else {
Signer* ca = GetCA(cm, resp->issuerKeyHash);
Signer* ca = NULL;
#ifndef NO_SKID
ca = GetCA(cm, resp->issuerKeyHash);
#else
ca = GetCA(cm, resp->issuerHash);
#endif
if (!ca || !ConfirmSignature(resp->response, resp->responseSz,
ca->publicKey, ca->pubKeySize, ca->keyOID,